Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
File:                     SCJSDeYUN6bOZcbjRidHBwPmXtE.mft (raw, json)
Hash identifier:          gQyCBL+mNkmTXN7CgbWx26WOiDHM+lUIW1jrhULKVpI=
Subject key identifier:   78:4B:EC:7D:1A:4A:29:68:B6:A1:02:7A:24:DE:E0:26:98:21:A4:86
Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
Certificate issuer:       /CN=4822520de61437a6ce65c6e34627470703e65ed1
Certificate serial:       019F9391AAF5064086B1686F3E52078247CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
Manifest number:          01DF
Signing time:             Fri 24 Jul 2026 10:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:24 +0000
Files and hashes:         1: SCJSDeYUN6bOZcbjRidHBwPmXtE.crl (hash: vOj1DOgSCerSKZMGUAnwBJxZED82qMB+67XeWLqO2tc=)
                          2: hy7V_eg1KosUr6B48auj7x_GyG0.roa (hash: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:aa:f5:06:40:86:b1:68:6f:3e:52:07:82:47:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1
        Validity
            Not Before: Jul 24 10:00:24 2026 GMT
            Not After : Jul 25 10:00:24 2026 GMT
        Subject: CN=784bec7d1a4a2968b6a1027a24dee0269821a486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:23:e8:d4:2d:87:ce:10:e3:c8:cf:2b:d0:
                    91:f7:48:31:6f:3e:06:3a:f8:91:06:e2:91:5e:72:
                    0e:eb:36:90:3e:94:96:4b:c1:fd:43:dd:7a:e9:8d:
                    f8:a0:70:54:8c:d1:60:c4:64:e1:a0:24:01:93:4f:
                    c3:89:c3:c8:3d:e2:c6:87:a6:39:be:45:df:90:c8:
                    a9:fe:43:ea:19:72:1a:3a:54:ff:b3:82:c6:a1:ae:
                    71:85:b2:6d:32:4f:3c:45:59:68:aa:9e:96:05:13:
                    c1:46:2c:8d:d6:7a:f6:fc:93:76:de:9a:25:64:1d:
                    99:d2:09:43:58:73:12:1d:b2:61:ad:9d:47:e1:29:
                    5b:23:c5:09:fa:29:4c:3e:d9:5f:28:98:44:5f:83:
                    81:10:49:0a:ff:58:dc:fa:98:bc:a5:e9:dc:2b:0b:
                    95:96:cb:f3:61:41:9d:f9:b1:ea:c2:51:f8:bf:32:
                    39:e3:0f:8e:c6:79:09:f2:85:96:ca:6b:11:5c:e1:
                    1b:de:b9:0e:6a:47:89:b8:8a:a8:b1:47:0f:ad:2e:
                    45:d0:c0:18:e2:53:30:11:ed:99:98:1d:bf:5e:7d:
                    ce:eb:18:fc:75:1c:c2:9f:2a:8c:7c:13:ee:0e:82:
                    95:c0:20:47:15:4c:e1:3f:7a:ad:bd:ea:0f:27:17:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4B:EC:7D:1A:4A:29:68:B6:A1:02:7A:24:DE:E0:26:98:21:A4:86
            X509v3 Authority Key Identifier:
                keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:90:22:f1:2e:4e:14:a8:f5:25:ec:84:db:93:13:de:5d:
         45:c4:30:9c:ae:12:15:9d:aa:f4:7b:a9:32:59:7e:2f:c0:0c:
         36:5c:2c:ce:02:85:b2:64:b0:70:46:68:8a:3d:0b:d2:da:9d:
         70:b6:76:03:a2:63:31:32:91:6d:36:a7:d0:b7:8d:38:6f:15:
         2f:b8:e8:2b:ff:f0:e6:4b:b2:c4:11:4b:2f:a1:94:ef:c2:4d:
         fc:7f:1d:8a:63:28:30:b8:48:b3:e2:06:a2:62:29:1b:51:c7:
         c6:74:fc:74:09:d2:a6:5a:e9:6e:f9:ea:c4:44:eb:fd:d8:73:
         05:36:82:c7:d5:8c:fe:9a:6d:b2:a2:99:a8:93:35:71:c1:18:
         78:9c:ec:cd:ac:57:f6:16:1b:a0:62:8b:b7:f8:25:bf:b4:f9:
         42:81:cc:b0:ab:a3:18:06:32:97:10:0d:27:13:4c:6f:9d:5c:
         d7:85:c7:2f:2c:75:91:23:be:1a:e4:5d:85:42:7b:66:82:e1:
         e1:18:1a:ef:43:c7:52:7a:d0:29:a0:66:82:59:a8:85:f3:dd:
         c5:ae:06:70:90:4d:f1:ce:72:53:66:c3:38:b4:65:94:6d:cb:
         59:67:c1:f1:84:c9:06:48:0e:c4:c1:ee:7c:58:c9:b4:bf:0a:
         30:3d:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:31 2026 by rpki-client